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(54) Image processing apparatus 

(57) An image processing apparatus for storing and 
reading out image data comprising authorization code 
inputting means 102 for reading in an authorization code 
from an authorization medium on which said authoriza- 
tion code, a particular one. is recorded, user identifica- 
tion inputting means for inputting user identification in- 
formation including the individual user authorization 
number issued at the time of the user being registered, 
user control means 1 04 for controlling the users by said 



authorization code and said user identification informa- 
tion and function-limiting means 106 for limiting the 
scope of functions that can be used by the user in case 
the user can not be identified by said authorization code 
inputted by said authorization code inputting means 102 
or said user identification information inputled by said 
user identification inputting means, Thus, the storing of 
image data by an unidentified user can be blocked, and 
the confidentiality of stored imaged data can be se- 
cured. 
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Description 

The present invention relates to an image process- 
ing apparatus for storing and reading out image data. 

The progress of digital technology has made it pos- 
sible not only to copy or print image data on paper but 
also to store those image data as file in such media as 
magnetic disk, optical disk and optomagnetic disk. In the 
copying apparatus field, too, there has been continuing 
technological development as represented by digital in- 
tegrated machine which incorporates the functions of 
printer, facsimile and other devices. Furthermore, a dig- 
ital integrated machine with such a filing function as 
aforementioned incorporated additionally therein is be- 
ginning to be commercialized. In the apparatus like the 
copying machine which is in common use by a plurality 
of people, however, stored data are shared and such 
data as can not very well be made public are subject to 
easy access. An image copying apparatus which solves 
such a problem is disclosed in the Japanese patent laid- 
open publication No.4-183175. 

Now, the configuration of the foregoing inage cop- 
ying apparatus is shown in Fig. 1 3 and the outline there- 
of is described hereinafter with reference to the drawing. 

First, the identification (I D) card of the user is insert- 
ed into the iD card reader 20s and the users iu code 
Memorized on the card is read out and stored on the 
memory of the control circuit 206. 

The original image placed on the orignl stand is op- 
tically read in by CCD 201 and turned into electric sig- 
nals. The output from CCD is amplified by an analog 
signal processor 202 and then digitized by a digital sig- 
nal processor 203, followed by signal processing includ- 
ing shading correction. A control circuit 206 regulates 
the flow of image data, and the read-in image data are 
stored in an inage storage 207. These stored image data 
are printed on paper by a printer 204. Thus the copying 
ends. 

Another ID card is inserted into the ID card reader. 
If the ID code of the second user is different from that 
stored on the memory of the aforesaid control circuit 
206, the image data in the foregoing image storage 207 
will be erased. If. on the other hand, the ID code is iden- 
tical with that of the first user, the recopying lamp will go 
on, indicating to the user that the foregoing image data 
stored in the foregoing image storage 207 can be printed 
again. If the user chooses to recopy. the printer 204 will 
output the image data stored tn the aforementioned im- 
age stoiage 207. 

This image copying apparatus can secure the con- 
fidentiality of image data, because it erases the image 
data stored in the above-mentioned image storage 207 
if the ID code of the new user is not identical with that, 
of the previous user. However, since the image data 
stored in the inage storage 207 is erased when another 
person with a different I D code uses the machine as de- 
scribed, the first user with the identical ID code can not 
pick out the image data in the image storage again. The 



2 

inage data is already lost. 

In the network use of the computer, access to the 
computer is regulated by the user's identification and 
password system, which has been long utilized. 

5 Unlike with such equipment as computer, the use 

of ID and password makes it complicated to operate 
such office automation (OA) apparatus as copying ma- 
chine of which the inputting means is limited, and it is 
apparently troublesome, especially for those who are 

10 not familiar with the computer. There is also developed 
a copying machine which regulates access by magnetic 
card, for example. But this system is originally intended 
for accounting the fee of copying service, and if a valid 
card is available, the machine allows unlimited use to 

75 anyone. For this reason, this system as it is now can not 
be used where a high confidentiality is required as is 
today. 

In view of such circumstances as described, the 
present invention is disclosed for the purpose of provid- 
es ing an image processing apparatus which can secure 
the confidentiality of stored image data without making 
the operation complicated. 

To effect the foregoing object, the present invention 
adopts the means described below on an image 
2S processing apparatus for storing the inputted image da- 
ta in an image storage means i08 ana outpuning the 
image data newly inputted or stored in the aforesaid im- 
age storage means 108 by image outputting means 110. 
That is to say, the above-mentioned image processing 
30 apparatus forms the basis of the present invention. 

In the aforementioned invention the image 
processing apparatus controlls the user corresponding 
to the authorization code and the user's ID by a user 
control means 104. In this situation, the user directs an 
35 authorization code inputting means 102 to read the au- 
thorization code recorded on an authorization medium. 
The users then directs a user ID inputting means to input 
the user's ID information whichi inlcudes the user au- 
thorization number of its own issued when the user was 
io registered. 

The user controlling means 104 specifies the user 
based on above authorization code inputted by the au- 
thorization code inputting means 102 and the user ID 
information inputted by the user ID inputting means. 
4 $ When the user is not specified, however, the function- 
limiting means 106 limits the functions available to the 
user. 

The above function-limiting means 106 is designed 
to limit such functions as a function to store the image 

50 data in an image storage means 108 and a function to 
read out the image data stored in the image storage 
means 108 and to output such data from above image 
outputting means 110. 

This arrangement can identify the user if the user 

55 authorization number is inputted by the user ID inputting 
means even when the authorization medium is not avail- 
able at hand. Also, if the user is not registered, the use 
of the image processing apparatus can be limited. This 
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way, the filing of image data by an unidentified person 
can be blocked and the confidentiality of the stored im-. 
age data can be secured. 

It may also be configured that the user control 
means 104 controls group identification information s 
which indicates the user's group, in addition to the user 
corresponding to the authorization code and user ID in- 
formation. The image data control means 105 controls 
the user who registered each image data as well as the 
access information that limits the access to each image *o 
data by respective user. 

The user control means 104 extracts group identi- 
fication information as well as specifies the user based 
on above authorization code inputted from the authori- 
zation code inputting means 102 and the user ID infor- is 
mation inputted from the user ID inputting means. Fur- 
ther the image data control means 105 extracts the user 
who registered the image data and the access right to 
that particular image data. And then a function-limiting 
means 106 limits readout of above image data from im- 20 
age storage means based on the information on the us- 
er, group identification and access right specified or ex- 
tracted in this way. 

The access right information controlled by the im- 
age data control means 1 05 in relation to the image data zs 
is composed of group identification information corre- 
sponding to the user who registers the image data, 
specified by the user control means 104. The access 
right can also be set as necessary by the user who reg- 
isters the image data. 30 

Thus, it limits the readout of the image data as unit 
and, therefore, can effectively raise the confidentiality of 
the stored image data. 

Fig. 1 is a block diagram showing the configuration 
of an embodiment of the present invention. 35 

Fig. 2 is a flow chart showing the operational proc- 
ess in an embodiment of the present invention. 

Fig. 3 is a conceptual diagram showing an example 
of the user control table of the present invention. 

Fig. 4 is a flow chart showing the process of record- 40 
ing an authorization code on the authorization medium. 

Fig. 5 is a flow chart showing the operational proc- 
ess of filing image data in an enbodiment of the present 
invention. 

Fig. 6 is a conceptual diagram showing another ex- 45 
ample of the user control table of the present invention. 

Fig. 7 is a conceptual diagram showing an example 
of the file control table of the present invention. 

Fig. B is a flow chart showing the operational proc- 
ess of reading out image data in an embodiment of the so 
present invention. 

Fig. 9 is a flow chart showing the process of regis- 
tering a new user in an embodiment of the present in-, 
vention. 

Fig. 1 0 is a flow chart showing the process of eras- S5 
ing a user registration in an embodiment of the present 

invention. 

Fig 1 1 is a flow chart showing the process of chang- 



ing registration cards in an embodinent of the present 
invention. 

Fig. 12 is a conceptual diagram showing an exam- 
ple of the user control table in changing registration 
cards in an embodiment of the present invention. 

Fig. 1 3 is a schematic diagram of an example of the 
conventional image copying apparatuses. 

EMBODIMENT 1 

Referring now to the drawings, the configuration 
and operation will be described hereinafter. Fig. 1 shows 
the configuration of the image processing apparatus in 
an embodiment of the present invention while Fig. 2 il- 
lustrates the flow chart of the operational process. 

First, the user inserts such an authorization medium 
as a magnetic card with a distinctive code recorded ther- 
eon into authorization code inputting means 102 like a 
magnetic card reader or inputs the user authorization 
number on an operator control panel 101a in the oper- 
ating means 101 provided with a plurality of keys as ten- 
key board or an LCD with a touch panel (Fig. 2 - Step S 
101). 

In case the authorization card is inserted in the 
above stop, the authorization code inputting means 1 02 
reads out the authorization code recorded on the au- 
thorization medium and notifies the user control means 
104. If the user authorization number is inputted on the 
operator control panel 101a instead, the user authoriza- 
tion number is held in a panel control 101b of the oper- 
ating means 101, which will notify the user control 
means 104 of the user authorization number if the exe- 
cute button on the operator control panel 101 a is 
pressed. 

The user control means 104, which controls the us- 
ers by a user control table 1 0 described in the following, 
decides by consulting the user control table 10 whether 
the authorization code or the user authorization number 
of the user is registered when notified of the authoriza- 
tion code from the authorization code inputting means 
1 02 or notified of the user authorization number from the 
operating means 101, and notifies the function-limiting 
means 106 of the decision (Step 102). 

The user control table 1 0 contains such information 
as the authorization codes 11 recorded on the authori- 
zation medium as, for example, shown in Fig. 3, the dis- 
tinctive user authorization numbers 1 2 issued at the time 
of the user being registered, the users' names 13 as full 
names or nicknames by which the user can be identified 
and the registration date 14 which indicates the date 
when the user is registered by the image storage means 
10S as hard disk, for example. It is noted that for the 
authorization code 11, a code of many figures would 
cause no inconveniences because it is recorded on the 
authorization medium, but the user authorization 
number 12 should be a small one as the user inputs it 
on the operator control panel 1 01 a by finger. 

In the next step, if the decision notified from the user 
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control means 104 indicates that the user is registered, 
the function-limiting means 1 06 issues an operation per- 
mit, notifying the image data control means 105 and the 
panel control 101b. Notified of the operation permit, the 
panel control 101b notifies the user that the apparatus 
is now ready for use as by changing LED in the execute 
button from red to green (Step S 103). 

If, on the other hand, the decision notified from the 
user control means 104 indicates that the user is not 
registered, the function-limiting means 106 does not is- 
sue an operation permit, notifying the image data control 
means 1 05 and the panel control 1 01 b that the operation 
is not permitted. Receiving the operation refusal notifi- 
cation, the panel control 101b indicates on the operator 
control panel 101a that the user is not registered (Step 
S108). 

In case the authorization medium is inserted with 
the back side up or some other kind of authorization me- 
dium is inserted, the authorization code inputting means 
102 also notifies the panel control 101b of the wrong 
authorization medium insertion and the panel control 
101b displays on the operator control panel 101a that 
the authorization medium insertion is faulty. 

When the apparatus is ready for use, then the user 
chooses the operation to be executed on the operator 
control panel 101a (Step S 104). In the present embod- 
iment, the first operation to be executed by the user is 
filing in which the original image is read in by inage data 
inputting means 103 as optical reader image scanner 
and the read-in original image data is digitized and 
stored in the image storage means 108 (Step S 105). 
The second operation is copying in which the image da- 
ta read in by the image data inputting means 1 03 is print- 
ed on such media as paperand OHP sheet by the image 
outputting means 110 as, for example, electrophoto- 
graphic printer (Step S 105). The third operation is file 
outputting in which the image data filed in the image 
storage means 108 is ouputted from the image output- 
ting means 110 (Step S 107). 

In the next step, if the chosen operation is inputted 
from the operator control panel 101 a, this operation di- 
rection is held in the panel control 101b, and the panel 
control 101b notifies the image data control means 105 
of the operation direction based on the operation permit 
of the function-limiting means 106, if the execute button 
on the operator control panel 101 a is pressed. And the 
image data control means 1 05 acts according to the op- 
eralion direction. 

In the image processing apparatus of the present 
embodiment, the authorization code inputting means 
102 and the user ID inputting means are provided as 
shown, whereby the user authorization number can be 
inputted from the operator control panel 101a for iden- 
tification of the user even if the authorization medium is 
not at hand. Besides, any person who is not registered 
with the user control means 1 04 is denied access to the 
apparatus. 

II is noted that the present embodiment is described 



in the case of the limit so set as to deny all the functions, 
but it is possible to confine the limit to the operations 
involving access to the image storage means 108 as, 
for example, filing and file outputting: in this case, too, 

5 the confidentiality of the image storage means 108 can 
be secured. Also, the limit can be placed not only on the 
functions with access to the image storage means 108 
but also on any other function. 

The operating means 1 01 also functions as user ID 

10 inputting means in which case the user authorization 
number is inputted on the operator control panel 101a. 
Furthermore, the input on the operator control panel 
101a offers selection of such parameters as the number 
of copies and the control of the sorter and such opera- 

7 5 tion modes as copying and filing. The display on the op- 
erator control panel 101a is provided with a function of 
conveying to the user information on the condition of the 
image processing apparatus, errors and other messag- 
es. 

20 in the foregoing embodiment, it is possible to so ar- 

range the authorization code to be recorded on the au- 
thorization medium that it is made up of running num- 
bers. In this way, distinctive and individual authorization 
media can be prepared simply, which are easy to con- 

25 trol. There will now be explained the process of record- 
ing a distinctive and running authorization code of run- 
ning number for each authorization medium. 

First, an authorization code to be recorded on the 
first medium is inputted (Fig. 4, Step S 201). And the 

30 authorization medium on which the authorization code 
is to be recorded is inserted into the writer (Step S 202), 
and the authorization code is written in (Step S 203). If 
the written-in authorization code is confirmed (Step S 
204), the authorization medium is ejected (Step S 205). 

35 if another authorization medium needs to be recorded, 
the authorization code is renewed once (from Step S 
206 to S 207), leaving the writer to wait for the second 
authorization medium to be inserted. This way author- 
ization media with running authorization codes can be 

40 prepared in a very simple sequence. 

It is also noted that even if the image processing 
apparatus of the present embodiment is one provided 
with a facsimile function or a function of printing out data 
as from the personal computer, the aforementioned 

4 5 functions can be effected the same way. 

It is now to be understood that the original image is 
a kind of information and includes everything from let- 
ters, characters, figures and diagrams to photos printed 
on paper, plastic sheet, plastic film and others as op- 

50 posed to the human eye and such artificial eyes as op- 
tical character reader (OCR). 

EMBODIMENT 2 

55 Referring to the drawings, there will be explained 

the configuration and operation of filing image data in 
the image processing apparatus in another embodiment 
of the present invention. Since the main points of the 
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configuration are the same as those of Embodiment 1, 
the description will be made with reference to Fig. 1 and 
will be omitted on the areas identical with those in the 
configuration of Embodiment 1. 

As in Embodiment 1 , the user first inserts the au- 
thorization medium into the authorization code inputting 
means 102 or inputs the user authorization number on 
the operator control panel 101a (Fig. 5 - Step S 301 ). 

In case the authorization card is inserted in the 
above step, the authorization code inputting means 102 
reads out the authorization code recorded on the au- 
thorization medium and notifies the user control means 
104. If the user authorization number is inputted on the 
operator control panel 101 a instead, the user authoriza- 
tion number is held in a panel control 101b of the oper- 
ating means, which will notify the user control means 
104 ot the user authorization number if the execute but- 
ton on the operator control panel 101a is pressed. 

The user control means 104 decides by contacting 
the user control table 10 whether the authorizalion code 
or the user authorization number of the user is regis- 
tered when notified of the authorization code from the 
authorization code inputting means 102 or notified of the 
user authorization number from the operating means 
101 as described above, and then notifies the function- 
limiting means 106 of the decision (Step 302). 

Here, the user control table 10 controls the group 
identification information 15 that shows to which group 
the user belongs as. for example, is shown in Fig. 6 in 
addition to the configuration in Embodiment 1 . If the de- 
cision indicates that the user is registered, the user con- 
trol means 104 notifies the function-limiting means 106 
of the user authorization number 1 2 and the group iden- 
tification information 15 on the user. 

In the next step, if the decision notified from the user 
control means 104 indicates that the user is registered, 
the function-limiting means 1 06 issues an operation per- 
mit as in Embodiment 1, notifying the user that the ap- 
paratus is ready tor use (Step S 303). 

If, on the other hand, the decision notified from the 
user control means 104 indicates that the user is not 
registered, the function-limiting means 106 does not is- 
sue an operation permit, notifying the image data control 
means 105 and the panel control 101b of the decision. 
Receiving the operation refusal notification, the panel 
control 101b indicates on the operator control panel 
101 a that the filing operation is not pernitted (Step S 
310). 

When the apparatus is ready for use, then the user 
chooses the operation to be executed (in this case, fil- 
ing) on ihe operator control panel 101a (Step S 304). 
Then, this operation direction is held in the panel control 
101b. and if the execute button on the operator control 
panel 101a is pressed, the panel control 101b directs 
the image data inputting means 103 to read in the orig- 
inal copy according to the operation permit of the func- 
tion-limiting means 106 and also directs the image data 
control means 105 to do filing of the image data (Step 



S 305). 

As directed, the image data inputting means 103 
reads in and digitizes the original and stores the data in 
a buffer 104 (Step S 306) At the same, the image data 

5 control means 105, which is directed to file the image 
data, produces image identification (ID) for the image 
data to be filed (Step S 307). 

Then, registration transfer means 111 gives the im- 
age data stored in the buffer a file name based on the 

to image ID received from the image data control means 
105, filing the image data in the image storage means 
108 (Step S 308). 

Here, the image data control means 105 stores 
such information as the file name 21 for the image data 

75 to be stored, registration date 22 indicating the date 
when the image data is registered, the registerant per- 
son number 23 and the access right information 24 in 
the file control table 20 of the attribution identification 
memory means 109 as, for example, is shown in Fig. 7 

20 (step S 309). 

For the registrant person number 23 specified by 
the user control means 106, the user authorization 
number 1 2 is used. 

The access right information 24 which indicates the 

zs scope accessible to the image storage means 108 is 
memorized on the file control table 20 with the group 
identification information 15 reflected as it is, the group 
identification information notified to the function-limiting 
means 106 along with the user authorization number. 

30 Here, it is possible to set the access right information. 
In designating the filing operation, for example, the user 
who registers image data, can choose and input one of 
the access right information modes on the operator con- 
trol panel 101a. For example, the user can choose 

35 among the following modes: the mode that the image 
data are open not only to his or her group but also to 
other groups, the mode that the image data are open to 
all users and the mode that the image data are not open 
to other than the user who registered the data. 

40 The access right information 24 is now explained 
on the assumption that a user who belongs to Group A 
registers image data. 

In the absence of designation, the access right in- 
formation 24 indicates Group A to which the user be- 

•*5 longs (Fig. 7,Q). It the user chooses the mode that the 
image data are open not only to his or her group but also 
to another group (Group C, for example), the access 
right information 24 indicates the user's group and- 
Group C as well (see Fig. 7,@). If the user chooses the 

so mode that the image data are open to all the users, then 
the access right information 24 indicates Group A and 
all the other groups (see Fig. 7,Q). If the user chooses 
the mode that the image data are not open to other than 
the user himself or herself, the access right information 

55 24 indicates no group, with Group A erased (Fig. 7,QV 
The user who registered the data can also change 
the access right information 24 set as above as neces- 
sary even after the image data are stored. 
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Embodiment 3 

Referring to the image processing apparatus de- 
scribed in Embodiment 2, there is now explained the 
process of specifying image data by image I D and read- 
ing out the image data. Fig. 8 is a flow chart showing 
this process. 

As in Embodiment 2, the user first inserts the au- 
thorization medium into the authorization code inputting 
means 102 or inputs the user authorization number on 
the operator control panel 101a. 

The subsequent operation is carried out in the same 
way as in Embodiment 2 including the identification of 
the user by the user control means 104 and the issuing 
of operation permit by the function-limiting means 106. 

When the apparatus is ready for use, then the user 
chooses the operation to be executed (in this case, file 
outputting) on the operator control panel 101a and in- 
puts the ID for the image data to be read out (Fig. 5, 
Slep S 401). Then, this operation direction and the im- 
age ID are held in the panel control 101b, and if the ex- 
ecute button on the operator control panel 101a is 
pressed, the panel control 101b notifies the image data 
control means 105 of the image ID and to direct the 
same to read out the data with the operation permit of 
the function-limiting means 106 (Step S 402). 

The image data control means 105 gets access to 
the file control table 20 and reads out the registrant per- 
son number 23 connected with the inage ID and the ac- 
cess right information 14, and notifies the function-lim- 
iting means 106 (Step S 403). 

Whether to permit the read-out of the image data, 
the function-limiting means 1 06 decides on the basis of 
identification of the registrant person number 23 of the 
image data to be read out and the access right informa- 
tion 24 which have been notified from the image data 
control means 105 and the user authorization number 
of the user and the group identification information 
which have been supplied from the user control means 
104 (Step S 404). That is to say, if the group contained 
in the group identification information 24 is found in the 
access right information 24 of the image data, permit is 
given for the image data to be read out. If, on the other 
hand, the group contained in the group identification in- 
formation 24 is not found in the access right information 
24 of the image data, no permit is given tor the image 
data to be read out However, even if the group con- 
tained in the group identification information 24 is not 
present in the access right information 24 of the image 
data, reading out the image data will be permitted pro- 
vided that the user authorization number tallies with the 
registrant person number 23 of the image data. 

For example, the user who can read out the image 
data of which the access right information 24 indicates 
Group A only (see Fig. 7,(j} is the one whose group is 
indicated as Group in the group identification informa- 
tion, that is users©and(2) in Fig. 6 The user (3) who 
does not belong to Group A as indicated in the group 



identification information can not read out the image da- 
ta. 

Image data indicated as "AH" in the access right in- 
formation 24 (see Fig. 7.(3) can be read out by any user. 
s The user who can read out image data of which 

group is not indicated in the access right information 24 
(see Fig. 7, (3) is limited to the one who has registered 
the image data. Anyone other than this user can not read 
out the image data. 
to if the foregoing judgement is that the reading out of 
the image data is permitted, the image data control 
means 103 directs the registration transfer means 111 
to read out the image file tallying with the image I D (Step 
S 405). According to this direction, the registration trans- 
is fer means 1 1 1 reads out the inage data in the image file 
from the image storage means 103 on the buffer 104, 
and the image data thus read out are then outputted 
from the image outputting means 110 (Step S 406). 
If, on the other hand, the reading out of the image 
20 data is not permitted in the foregoing judgement, the de- 
cision is notified to the panel control 101b, which then 
puts out a display on the operator control panel 101 that 
the reading out of the image data is not permitted (Step 
S407). 

25 As is explained, the confidentiality of the image data 

filed in the image storage means 108 can be raised by 
limiting the image data as unit according the access right 
information on the image data and the group identifica- 
tion information on the user 

30 

Embodiment 4 

The process of registering a new user in the appa- 
ratuses in the foregoing embodiments is hereinafter ex- 
35 plained with reference to Fig. 9 showing a flow chart of 
the process. 

First, an unregistered authorization medium 8 is in- 
serted into the authorization code inputting means 102 
(Fig. 9, Step S 501). The authorization code inputting 

40 means 102 then reads out the authorization code re- 
corded on the authorization medium and notifies the us- 
er control means 1 04. The user control means 1 04 con- 
tacts the user control table 10 with the notified authori- 
zation code, and checks if the authorization medium 8 

45 is already registered or not (Step S 502). If it is found to 
have already been registered, it is so indicated to the 
user on the operator control panel 101a, and duplication 
of registration is thus avoided. At the same time, the au- 
thorization medium 8 is ejected (Step S 503), with the 

50 mode returning to the initial state and the insertion of an 
unregistered medium suggested. 

In case the inserted authorization medium is found 
not registered with the user control table 10, then the 
user control means 104 issues and notifies a new user 

55 authorization number to the user (Step S 504). The user, 
who is notified of the new authorization number, inputs 
the group identification information and others on the 
operator control panel 101a (Step S 505). At the same 
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time, the user control means 104 relates and stores the 
new user authorization number, authorization code, 
group identification information etc. in the user control 
table 10. When the process is over, the authorization 
medium 8 is ejected (Step S 506), completing the reg- 
istration of the new user (Step S 507). 

If the authorization code thus memorized on the au- 
thorization medium is not registered with the user con- 
trol table 1 0, it can be registered as new entry with ease. 
Even if, therefore, a magnetic writer or the like is not 
available at hand, there is no need to have any equip- 
ment especially for this purpose: a medium with a dis- 
tinctive authorization code recorded thereon will do. 

It is noted that it is explained in the present embod- 
iment that if the authorization medium is already regis- 
tered, the mode will return to the initial state. It is also 
possible to finish the mode when the authorization me- 
dium is registered. (Step S 507). 

EMBODIMENT 5 

Referring now to Fig. 10, there is hereinafter de- 
scribed the process of erasing the user in the appara- 
tuses in the foregoing embodiments. Fig. 10 is a flow 
chart showing the process thereof. 

First, the authorization medium 8 of the user to be 
erased is inserted into the authorization code inputting 
means 102 (Fig. 10, Step S 601). The authorization 
code inputting means 102 then reads out the authoriza- 
tion code recorded on the authorization medium and no- 
tifies the user control means 104. The user control 
means 1 04 gets access to the user control table 1 0 with 
the notified authorization code, and checks if the author- 
ization medium 6 is already registered or not (Step S 
602). If the inserted authorization medium 8 is already 
unregistered, it is so indicated to the user on the oper- 
ator control panel 101a. At the same time, the authori- 
zation medium 8 is ejected (Step S 603), with the mode 
returning to the initial state. 

If. on the other hand, the inserted authorization me- 
dium is still registered with the user control table 10, it 
is so indicated to the user on the operator control panel 
101a that the user registration will be erased and the 
user ts asked to confirm. If the erasing is okayed (Step 
S 604), the user control means 104 erases all informa- 
tion on the registered user (Step S 605). When the proc- 
ess is over, the authorization medium 8 is ejected (Step 
S 606), completing the process of erasing the user (Step 
S 607). As shown, when the user registration is erased, 
the data registered with the user control table 1 0 are all 
erased. Therefore, the authorization medium which has 
been used by the erased user can be used for a new 
user by making a new registration according to the pro-, 
cedure outlined in Embodiment 4. 

It is noted that it is explained in Embodiment 4 that 
if the inserted authorization medium is already unregis- 
tered, the mode will return to the initial state. It is also 
possible to finish the mode if the authorization medium 



is unregistered (Step S 607). It is also so described that 
if the erasing is not okayed in the erasure confirming 
stage (Step S 604), the erasing process will end. When 
the mode returns to the initial erasing state, the Initial- 
5 izing will follow the same way (Step S 603). 

EMBODIMENT 6 

The process of changing cards in the apparatuses 

to in the foregoing embodiments are hereinafter explained 
with reference to Fig. 11 which shows a flow chart of the 
process thereof. 

In case the user wants to replace the registered au- 
thorization medium as when the medium is lost, an un- 

is registered authorization medium 8 is first inserted into 
the authorization code inputting means 102 (Fig. 11, 
Step S 701 ). The authorization code inputting means 
102 reads out the authorization code recorded on the 
authorization medium and notifies the user control 

20 means 104. The user control means 104 contacts the 
user control table 1 0 with the notified authorization code, 
and checks if the authorization medium 8 is already reg- 
istered or not (Step S 702). If it is already registered, it 
is so indicated on the operator control panel 101a, with 

2S authorization medium 8 ejected (Step S 703) and with 
the mode returning to the initial state. 

If, on the other hand, the inserted authorization me- 
dium is not registered with the user control table 10, the 
user inputs the user authorization number on the oper- 

30 ator control panel 101a (Step S 704). 

The user control means 104 changes the user control 
table 10 for the user tallying with the inputted user au- 
thorization number from the formerly used authorization 
code to the one on the inserted authorization medium 

.35 (Step S 705) as shown in Fig. 12. When the process is 
over, the authorization medium 8 is ejected (Step S 
706), completing the process of changing cards (Step 
S 707). 

When the authorization medium is lost or broken, a 
40 new authorization medium can be registered taking over 
the old user information without difficulty as shown. 

It is noted that it is explained in the foregoing em- 
bodiment that if the inserted authorization medium is al- 
ready registered, the mode will return to the initial state. 
•*s it is also possible to finish the mode when the inserted 
authorization medium is already registered. (Step S 
706). 

It is so described in the foregoing embodiments that 
the user authorization number is inputted on the opera- 
te tor control panel 1 01 a. It can be so arranged that a pass- 
word is inputted in addition to the user authorization 
number. This can easily preclude the possibility of the 
image processing apparatus being used with some oth- 
er's user authorization number. In case it is so arranged 
55 that a password is inputted in addition to the user au- 
thorization number it has to be so configured that the 
user control table 10 has the password connected with 
the user authorization number. 
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Furthermore, It is possible to freely change the 
password. For example, a password tentatively inputted 
as by an apparatus service man can be changed to an 
easy one. A process example of changing passwords is 
now explained briefly. First, the authorization medium is 5 
inserted into the authorization code inputting means 1 02 
or the user authorization number and the password are 
inputted on the operator control panel 101a. Then, the 
password changing function is selected, and the pass- 
word now in use is inputted on the operator control panel to 

101 a. And a new password is inputted. The user control 
means 104 contacts the user control table 10 and 
changes the password connected with the authorization 
code or the user authorization number. In this way, pass- 
words can be changed with ease. is 

By the way, the authorization code inputting means 

102 can be formed of any equipment using media that 
can give a distinctive authorization code to each card, i. 
e., the punched card reader and IC card reader, as well 

as the magnetic card reader 20 

It is also so described in the foregoing embodiments 
that the user ID inputting means is the operating means 
101 provided with the operator control panel 101 a. The 
purpose is served just the same by such inputting 
means as keyboard, ten-key board and touch panel. Re- 2B 
mote operation is also possible by such serial commu- 
nication means like LAN, IrDA and RS 232. 

As has been described, the image processing ap- 
paratuses according to the present invention, if provided 
with the authorization code inputting means and the us- 30 
er ID inputting means, can identify the user by a user 
authorization number inputted from the user ID inputting 
means even if the authorization medium is not available 
at hand. And if the user can not be identified, the use of 
the image processing apparatus can be denied. 35 

Furthermore, since the reading out of the image da- 
ta as unit is limited on the basis of the access right in- 
formation on the image data to be read out and the group 
identification information on the user who wants to read 
out the data, the confidentiality of the filed image data 40 
can be raised. 

It is also possible to make new registration, erase 
the user registration or change registered cards without 
difficulty, and one authorization medium can be used in 
turn. 45 



Claims 

1 . An image processing apparatus for storing inputted so 
image data in image storage means and outpuiting 
said image data or the image data stored in said 
image storage means by inage outputting means 
which comprises: 

55 

authorization code inputting means for reading 
in an authorization code from an authorization 
medium on which said authorization code, a 



particular one, is recorded, 
user identification inputting means for inputting 
user identification information including an in- 
dividual authorization number issued at the 
time of the user being registered, 
user control means for controlling the users by 
said authorization code and said user identifi- 
cation information, 

function-limiting means for limiting the scope of 
functions that can be used by the user in case 
the user can not be identified by said authori- 
zation code inputted by said authorization code 
inputting means or said user identification infor- 
mation inputted by said user identification in- 
putting means. 

2. An image processing apparatus as defined in claim 
1 wherein said function-limiting means limits the 
function of storing said image data in said image 
storage means 

3. An image processing apparatus as defined in claim 
1 or claim 2 wherein said function-limiting means 
limits the function of reading out said image data 
stored in said image storage means from said im- 
age storage means and outputting said image data 
from said image outputting means. 

4. An image processing apparatus for storing inputted 
image data in image storage means and outputting 
said image data or the image data stored in said 
image storage means by image outputting means 
which comprises: 

authorization code inputting means for reading 
in an authorization code from an authorization 
medium on which said authorization code, a 
particular one, is recorded, 
user identification inputting means for inputting 
user identification information including an in- 
dividual authorization number issued at the 
time of the user being registered, 
user control means for controlling the users by 
said authorization code and said user identifi- 
cation information, and controlling the group 
identification information which indicates the 
group the user belongs to, 
image data control means for associating and 
controlling said image data, the user who reg- 
istered said image data and information on ac- 
cess right to said image data showing the scope 
accessible to said storage means, 
function-limiting means for limiting the reading 
out of said image data from said image storage 
means on the basis of the user identification 
and the group identification information fur- 
nished by said user control means on the basis 
of said authorization code inputted by said au- 
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thorization code inputting means or said user 
identification information inputted by said user 
identification inputting means and information 
supplied by said image data control means on 
the user who has registered the image data 5 
picked out for readout and on said access right 
to said image data, 

5. An image processing apparatus as defined in claim 

4 wherein said information on access right control- to 
led by said image data control means in relation to 
said image data is formed of group identification in- 
formation connected with the user who registers 
said image data, said group identification informa- 
tion supplied by user control means. is 

6. An image processing apparatus as defined in claim 
4 or claim 5 wherein said information on access 
right controlled by said image data control means 

in relation to said image data is set by the user who 20 
registers said image data. 

7. An image processing apparatus as defined in any 
of claims 1 to 6 wherein said user control means 
erases said all information connected with said au- 25 
thorization code or said user identification informa- 
tion if said authorization code is inputted by said au- 
thorization code inputting means or said user iden- 
tification information is inputted by said user identi- 
fication inputting means. 30 

8. An image processing apparatus as defined in any 
of claims 1 to 7 wherein said user control means, if 
said authorization code, unregistered, is inputted 
from said authorization code inputting means and 35 
said user identification information on the user 
changing the code is inputted from said user iden- 
tification inputting means : changes the authoriza- 
tion code related to said user identification informa- 
tion to said unregistered code. 40 

9. An image processing apparatus as defined in any 
of claims 1 to 8 wherein said user identification in- 
formation is said user authorization number. 

45 

10. An image processing apparatus as defined in any 
of claims 1 to 3 wherein said user identification in- 
formation is said user authorization number and a 
password 

50 

11. An image processing apparatus as defined in claim 
9 wherein said user control means, if said authori- 
zation code, unregistered, is inputted from said au- 
thorization code inputting means, issues a user au- 
thorization number, noiifies the user of said user au- ss 
thorization number and at the same time newly reg- 
isters said authorization code and said user author- 
ization number 



12. An image processing apparatus as defined in claim 
10 wherein said user control means, if said author- 
ization code, unregistered, is inputted from said au- 
thorization code inputting means, issues a user au- 
thorization number, notifies the user of said user au- 
thorization number and at the same time newly reg- 
isters said authorization code and, furthermore, if a 
password is inputted by said user from said user 
identification inputting means, newly registers said 
authorization code, said user authorization number 
and said password. 

13. An image processing apparatus as defined in claim 
10 or claim 12 wherein said user control means, if 
said authorization code, unregistered, is inputted 
from said authorization code inputting means or 
said user identification information is inputted from 
said user identification inputting means and if a new 
password is inputted, changes said password cor- 
responding lo said authorization code or said user 
identification information to said new password. 

14. An image processing apparatus as defined in any 
of clains 1 to 1 3 wherein said authorization code in- 
putting means is either a magnetic card reading ap- 
paratus, a punched card reading apparatus or an 
IC card. 

15. An image processing apparatus as defined in any 
of claims 1 to 14 wherein said user identification in- 
putting means is either a keyboard, a ten-key board 
or a touch pane! or a serial communication means. 
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